Hitachi Job Management Partner 1/remote Control Agent vulnerabilities

2 CVEs affecting Hitachi Job Management Partner 1/remote Control Agent, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-29645, published 2021-10-12.

More from Hitachi.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-29644, published 2021-10-12. Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days. Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 contains a remote code execution vulnerability because of an Integer Overflow. An attacker with network access to port 31016 may exploit this…
• CVE-2021-29645, published 2021-10-12. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API with arbitrary arguments via a local pipe, leading to a local privilege escalation vulnerability. An attacker…